mdig.html revision ee2e5fec653c2ccbe1531d6e0bded2218d6a76af
c10fda07d68c04221c2d552dc71a2de1352074cbTinderbox User - Copyright (C) 2015, 2016 Internet Systems Consortium, Inc. ("ISC")
9c49c394b4218cc9c743a372a8fcfb787f5ea8caAndreas Gustafsson - Permission to use, copy, modify, and/or distribute this software for any
ec5347e2c775f027573ce5648b910361aa926c01Automatic Updater - purpose with or without fee is hereby granted, provided that the above
9c49c394b4218cc9c743a372a8fcfb787f5ea8caAndreas Gustafsson - copyright notice and this permission notice appear in all copies.
9c49c394b4218cc9c743a372a8fcfb787f5ea8caAndreas Gustafsson - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews - PERFORMANCE OF THIS SOFTWARE.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<meta name="generator" content="DocBook XSL Stylesheets V1.78.1">
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry">
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<a name="man.mdig"></a><div class="titlepage"></div>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<p><span class="application">mdig</span> — DNS pipelined lookup utility</p>
a8f6b2aa46f882c7c680b7bdab1dfb78a76787eaMark Andrews<div class="cmdsynopsis"><p><code class="command">mdig</code> {@server} [<code class="option">-f <em class="replaceable"><code>filename</code></em></code>] [<code class="option">-h</code>] [<code class="option">-v</code>] [<code class="option">-4</code>] [<code class="option">-6</code>] [<code class="option">-b <em class="replaceable"><code>address</code></em></code>] [<code class="option">-p <em class="replaceable"><code>port#</code></em></code>] [<code class="option">-c <em class="replaceable"><code>class</code></em></code>] [<code class="option">-t <em class="replaceable"><code>type</code></em></code>] [<code class="option">-i</code>] [<code class="option">-x <em class="replaceable"><code>addr</code></em></code>] [plusopt...]</p></div>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<div class="cmdsynopsis"><p><code class="command">mdig</code> {-h}</p></div>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<div class="cmdsynopsis"><p><code class="command">mdig</code> [@server] {global-opt...} {
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein {local-opt...}
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<p><span class="command"><strong>mdig</strong></span>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein is a multiple/pipelined query version of <span class="command"><strong>dig</strong></span>:
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein instead of waiting for a response after sending each query,
26e2a07a0b6a3b1eccef82ba31270d0c54ad4f06Mark Andrews it begins by sending all queries. Responses are displayed in
c1a883f2e04d94e99c433b1f6cfd0c0338f4ed85Mark Andrews the order in which they are received, not in the order the
030aac3dbc57f99bad1d251b0783890ff0369952Automatic Updater corresponding queries were sent.
a9f68291c8db8111b88442635a04dfd35221411bAutomatic Updater <span class="command"><strong>mdig</strong></span> options are a subset of the
5fa46bc91672ef5737aee6f99763161511566c24Tinderbox User <span class="command"><strong>dig</strong></span> options, and are divided into "anywhere
938440694b33cd752e9e4b71a526368b4811c177Tinderbox User options" which can occur anywhere, "global options" which must
c10fda07d68c04221c2d552dc71a2de1352074cbTinderbox User occur before the query name (or they are ignored with a warning),
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein and "local options" which apply to the next query on the command
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein The {@server} option is a mandatory global
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein option. It is the name or IP address of the name server to query.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein (Unlike <span class="command"><strong>dig</strong></span>, this value is not retrieved from
f5d30e2864e048a42c4dc1134993ae7efdb5d6c3Mark Andrews <code class="filename">/etc/resolv.conf</code>.) It can be an IPv4 address
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein in dotted-decimal notation, an IPv6 address in colon-delimited
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein notation, or a hostname. When the supplied
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <em class="parameter"><code>server</code></em> argument is a hostname,
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <span class="command"><strong>mdig</strong></span> resolves that name before querying
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt the name server.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<p><span class="command"><strong>mdig</strong></span>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt provides a number of query options which affect
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt the way in which lookups are made and the results displayed. Some of
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt these set or reset flag bits in the query header, some determine which
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt sections of the answer get printed, and others determine the timeout
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt and retry strategies.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Each query option is identified by a keyword preceded by a plus
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein sign (<code class="literal">+</code>). Some keywords set or reset an
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt option. These may be preceded by the string <code class="literal">no</code>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt to negate the meaning of that keyword. Other keywords assign
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt values to options like the timeout interval. They have the
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein The <code class="option">-f</code> option makes <span class="command"><strong>mdig</strong></span>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein operate in batch mode by reading a list of lookup requests to
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein process from the file <em class="parameter"><code>filename</code></em>. The file
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt contains a number of queries, one per line. Each entry in the
30eec077db2bdcb6f2a0dc388a3cdde2ede75ec1Mark Andrews file should be organized in the same way they would be presented
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein as queries to <span class="command"><strong>mdig</strong></span> using the command-line interface.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein The <code class="option">-h</code> causes <span class="command"><strong>mdig</strong></span> to
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein print the detailed help with the full list of options and exit.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein The <code class="option">-v</code> causes <span class="command"><strong>mdig</strong></span> to
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein print the version number and exit.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein The <code class="option">-4</code> option forces <span class="command"><strong>mdig</strong></span> to
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein only use IPv4 query transport.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein The <code class="option">-6</code> option forces <span class="command"><strong>mdig</strong></span> to
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein only use IPv6 query transport.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein The <code class="option">-b</code> option sets the source IP address of the
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein query to <em class="parameter"><code>address</code></em>. This must be a valid
b98225ff8a5721a998ccb440df4d261488fef163Mark Andrews address on one of the host's network interfaces or "0.0.0.0" or
b98225ff8a5721a998ccb440df4d261488fef163Mark Andrews "::". An optional port may be specified by appending
8f7de3db7ec299ddeded142905f5eb1f22076353Evan Hunt "#<port>"
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt The <code class="option">-p</code> option is used when a non-standard port
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt number is to be queried.
b98225ff8a5721a998ccb440df4d261488fef163Mark Andrews <em class="parameter"><code>port#</code></em> is the port number
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt that <span class="command"><strong>mdig</strong></span> will send its queries instead of
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt the standard DNS port number 53. This option would be used to
b98225ff8a5721a998ccb440df4d261488fef163Mark Andrews test a name server that has been configured to listen for
b98225ff8a5721a998ccb440df4d261488fef163Mark Andrews queries on a non-standard port number.
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt The global query options are:
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt<div class="variablelist"><dl class="variablelist">
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt<dt><span class="term"><code class="option">+[no]additional</code></span></dt>
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt Display [do not display] the additional section of a
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt reply. The default is to display it.
b98225ff8a5721a998ccb440df4d261488fef163Mark Andrews<dt><span class="term"><code class="option">+[no]all</code></span></dt>
8f7de3db7ec299ddeded142905f5eb1f22076353Evan Hunt Set or clear all display flags.
8f7de3db7ec299ddeded142905f5eb1f22076353Evan Hunt<dt><span class="term"><code class="option">+[no]answer</code></span></dt>
8f7de3db7ec299ddeded142905f5eb1f22076353Evan Hunt Display [do not display] the answer section of a
8f7de3db7ec299ddeded142905f5eb1f22076353Evan Hunt reply. The default is to display it.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+[no]authority</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Display [do not display] the authority section of a
30eec077db2bdcb6f2a0dc388a3cdde2ede75ec1Mark Andrews reply. The default is to display it.
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt<dt><span class="term"><code class="option">+[no]besteffort</code></span></dt>
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt Attempt to display the contents of messages which are
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt malformed. The default is to not display malformed
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt<dt><span class="term"><code class="option">+[no]cl</code></span></dt>
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt Display [do not display] the CLASS when printing the
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt<dt><span class="term"><code class="option">+[no]comments</code></span></dt>
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt Toggle the display of comment lines in the output.
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt The default is to print comments.
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt<dt><span class="term"><code class="option">+[no]crypto</code></span></dt>
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt Toggle the display of cryptographic fields in DNSSEC
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt records. The contents of these field are unnecessary
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt to debug most DNSSEC validation failures and removing
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt them makes it easier to see the common failures. The
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt default is to display the fields. When omitted they
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt are replaced by the string "[omitted]" or in the
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt DNSKEY case the key id is displayed as the replacement,
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt e.g. "[ key id = value ]".
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt<dt><span class="term"><code class="option">+dscp[=value]</code></span></dt>
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt Set the DSCP code point to be used when sending the
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt query. Valid DSCP code points are in the range
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt [0..63]. By default no code point is explicitly set.
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt<dt><span class="term"><code class="option">+[no]multiline</code></span></dt>
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt Print records like the SOA records in a verbose
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt multi-line format with human-readable comments. The
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt default is to print each record on a single line, to
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt facilitate machine parsing of the <span class="command"><strong>mdig</strong></span>
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt<dt><span class="term"><code class="option">+[no]question</code></span></dt>
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt Print [do not print] the question section of a query
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt when an answer is returned. The default is to print
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt the question section as a comment.
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt<dt><span class="term"><code class="option">+[no]rrcomments</code></span></dt>
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt Toggle the display of per-record comments in the
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt output (for example, human-readable key information
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt about DNSKEY records). The default is not to print
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt record comments unless multiline mode is active.
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt<dt><span class="term"><code class="option">+[no]short</code></span></dt>
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt Provide a terse answer. The default is to print the
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt answer in a verbose form.
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt<dt><span class="term"><code class="option">+split=W</code></span></dt>
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt Split long hex- or base64-formatted fields in resource
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt records into chunks of <em class="parameter"><code>W</code></em>
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt characters (where <em class="parameter"><code>W</code></em> is rounded
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt up to the nearest multiple of 4).
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt <em class="parameter"><code>+nosplit</code></em> or
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt <em class="parameter"><code>+split=0</code></em> causes fields not to
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt be split at all. The default is 56 characters, or
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt 44 characters when multiline mode is active.
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt<dt><span class="term"><code class="option">+[no]tcp</code></span></dt>
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt Use [do not use] TCP when querying name servers. The
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt default behavior is to use UDP.
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt<dt><span class="term"><code class="option">+[no]ttlid</code></span></dt>
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt Display [do not display] the TTL when printing the
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt<dt><span class="term"><code class="option">+[no]ttlunits</code></span></dt>
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt Display [do not display] the TTL in friendly human-readable
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt time units of "s", "m", "h", "d", and "w", representing
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt seconds, minutes, hours, days and weeks. Implies +ttlid.
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt<dt><span class="term"><code class="option">+[no]vc</code></span></dt>
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt Use [do not use] TCP when querying name servers. This
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt alternate syntax to <em class="parameter"><code>+[no]tcp</code></em>
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt is provided for backwards compatibility. The "vc"
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt stands for "virtual circuit".
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt The <code class="option">-c</code> option sets the query class to
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt <em class="parameter"><code>class</code></em>. It can be any valid query class
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt which is supported in BIND 9. The default query class is "IN".
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt The <code class="option">-t</code> option sets the query type to
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt <em class="parameter"><code>type</code></em>. It can be any valid query type
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt which is supported in BIND 9. The default query type is "A",
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt unless the <code class="option">-x</code> option is supplied to indicate
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt a reverse lookup with the "PTR" query type.
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt The <code class="option">-i</code> option sets the reverse domain for
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt IPv6 addresses to IP6.INT.
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt Reverse lookups — mapping addresses to names — are
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt simplified by the <code class="option">-x</code> option.
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt <em class="parameter"><code>addr</code></em> is an IPv4
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt address in dotted-decimal notation, or a colon-delimited IPv6 address.
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt <span class="command"><strong>mdig</strong></span> automatically performs a lookup for a
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt query name like <code class="literal">11.12.13.10.in-addr.arpa</code> and
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt sets the query type and class to PTR and IN respectively.
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt By default, IPv6 addresses are looked up using nibble format
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt under the IP6.ARPA domain. To use the older RFC1886 method
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt using the IP6.INT domain specify the <code class="option">-i</code> option.
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt The local query options are:
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt<div class="variablelist"><dl class="variablelist">
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt<dt><span class="term"><code class="option">+[no]aaflag</code></span></dt>
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt A synonym for <em class="parameter"><code>+[no]aaonly</code></em>.
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt<dt><span class="term"><code class="option">+[no]aaonly</code></span></dt>
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt Sets the "aa" flag in the query.
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt<dt><span class="term"><code class="option">+[no]adflag</code></span></dt>
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt Set [do not set] the AD (authentic data) bit in the
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt query. This requests the server to return whether
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt all of the answer and authority sections have all
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt been validated as secure according to the security
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt policy of the server. AD=1 indicates that all records
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt have been validated as secure and the answer is not
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt from a OPT-OUT range. AD=0 indicate that some part
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt of the answer was insecure or not validated. This
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt bit is set by default.
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt<dt><span class="term"><code class="option">+bufsize=B</code></span></dt>
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt Set the UDP message buffer size advertised using EDNS0
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt to <em class="parameter"><code>B</code></em> bytes. The maximum and
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt minimum sizes of this buffer are 65535 and 0 respectively.
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt Values outside this range are rounded up or down
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt appropriately. Values other than zero will cause a
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt EDNS query to be sent.
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt<dt><span class="term"><code class="option">+[no]cdflag</code></span></dt>
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt Set [do not set] the CD (checking disabled) bit in
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt the query. This requests the server to not perform
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt DNSSEC validation of responses.
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt<dt><span class="term"><code class="option">+[no]cookie[<span class="optional">=####</span>]</code></span></dt>
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt Send a COOKIE EDNS option, with optional value.
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt Replaying a COOKIE from a previous response will allow
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt the server to identify a previous client. The default
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt<dt><span class="term"><code class="option">+[no]dnssec</code></span></dt>
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt Requests DNSSEC records be sent by setting the DNSSEC
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt OK bit (DO) in the OPT record in the additional section
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt of the query.
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt<dt><span class="term"><code class="option">+[no]edns[=#]</code></span></dt>
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt Specify the EDNS version to query with. Valid values
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt are 0 to 255. Setting the EDNS version will cause
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt a EDNS query to be sent. <code class="option">+noedns</code>
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt clears the remembered EDNS version. EDNS is set to
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt 0 by default.
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt<dt><span class="term"><code class="option">+[no]ednsflags[=#]</code></span></dt>
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt Set the must-be-zero EDNS flags bits (Z bits) to the
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt specified value. Decimal, hex and octal encodings are
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt accepted. Setting a named flag (e.g. DO) will silently be
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt ignored. By default, no Z bits are set.
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt<dt><span class="term"><code class="option">+[no]ednsopt[=code[:value]]</code></span></dt>
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt Specify EDNS option with code point <code class="option">code</code>
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt and optionally payload of <code class="option">value</code> as a
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt hexadecimal string. <code class="option">+noednsopt</code>
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt clears the EDNS options to be sent.
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt<dt><span class="term"><code class="option">+[no]expire</code></span></dt>
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt Send an EDNS Expire option.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+[no]nsid</code></span></dt>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Include an EDNS name server ID request when sending
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<dt><span class="term"><code class="option">+[no]recurse</code></span></dt>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Toggle the setting of the RD (recursion desired) bit
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein in the query. This bit is set by default, which means
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <span class="command"><strong>mdig</strong></span> normally sends recursive
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<dt><span class="term"><code class="option">+retry=T</code></span></dt>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Sets the number of times to retry UDP queries to
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein server to <em class="parameter"><code>T</code></em> instead of the
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein default, 2. Unlike <em class="parameter"><code>+tries</code></em>,
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein this does not include the initial query.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein<dt><span class="term"><code class="option">+[no]subnet=addr[/netmask]</code></span></dt>
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Send (don't send) an EDNS Client Subnet option with the
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein specified IP address or network prefix.
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <span class="command"><strong>mdig +subnet=0.0.0.0/0</strong></span>, or simply
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein <span class="command"><strong>mdig +subnet=0</strong></span> for short, sends a
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein Client Subnet option with an empty address and a
268a4475065fe6a8cd7cc707820982cf5e98f430Rob Austein source prefix length of zero, which signals a resolver
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt that the EDNS Client Subnet option should not be used
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt when resolving this query.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+timeout=T</code></span></dt>
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt Sets the timeout for a query to
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt <em class="parameter"><code>T</code></em> seconds. The default
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt timeout is 5 seconds for UDP transport and 10 for TCP.
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt An attempt to set <em class="parameter"><code>T</code></em> to less
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt than 1 will result
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt in a query timeout of 1 second being applied.
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt<dt><span class="term"><code class="option">+tries=T</code></span></dt>
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt Sets the number of times to try UDP queries to server
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt to <em class="parameter"><code>T</code></em> instead of the default,
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt 3. If <em class="parameter"><code>T</code></em> is less than or equal
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt to zero, the number of tries is silently rounded up
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt<dt><span class="term"><code class="option">+udptimeout=T</code></span></dt>
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt Sets the timeout between UDP query retries.
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt<dt><span class="term"><code class="option">+[no]unknownformat</code></span></dt>
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt Print all RDATA in unknown RR type presentation format
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt (RFC 3597). The default is to print RDATA for known types
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt in the type's presentation format.
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt<dt><span class="term"><code class="option">+[no]zflag</code></span></dt>
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt Set [do not set] the last unassigned DNS header flag in a
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt DNS query. This flag is off by default.
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt<p><span class="citerefentry"><span class="refentrytitle">dig</span>(1)</span>,